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Trend Micro™ 


Mobile Network Security 


Securing Enterprise Private Mobile Networks 





Advancements in connectivity bring new possibilities. It is essential to prepare for 
cyber threats that stem from utilizing connected mission-critical applications in a 
borderless internet of things (loT) network environment. 


Securing the new reality of connectivity 


New technological evolutions to loT and advanced mobile networks like 5G will 
push mission-critical network-security management for enterprises to new levels. 


As we transition to the new reality, the ideal cybersecurity solution balances harmonized networks 


with the emerging mobile technology. 
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New risks New challenges New consideration 


Challenges faced by enterprises when deploying a private mobile network: 


Risky entry points 


* SIM cards can be lost or stolen, allowing attackers to access a 
customer's private mobile network 


* Employees may violate company policy by installing a 
company-issued SIM card on a risky device 


Lack of device and security visibility 


e Traditional IT security products do not know which cellular 
user equipment (UE) is at risk because they are unfamiliar 
with International Mobile Equipment Identity (IMEI) or 
International Mobile Subscriber Identity (IMSI), which are used 
in communications technology (CT) networks 


e CT solutions are generally bad at identifying threats 


Hard to manage security policies 


* The IP address of a UE in a private mobile network change 
occasionally, thus, security management can no longer be 
based on IP addresses 


Lack of expertise in CT and IT integration 


e Interconnection between CT and IT can be a challenge when 
managing private mobile network security across these two 
heterogeneous platforms 


Quick response needed 


* Some advanced IT security products may know which UE 
is risky, but security operators can still have difficulty with 
quickly responding to and preventing the UE from accessing 
its CT network. This is because UEs access to its CT network 
is managed by CT system, and it takes time for a security 
operator to respond to the threat between IT and CT networks 


Critical assets need to be protected 


* Edge computing application servers, such as facial 
recognition, mixed reality (MR), and automatic optical 
inspection (AOI) on your multi-access edge computing (MEC) 
system, are generally closed systems. This makes it hard to 
install any existing security products on them, thus, they can 
be vulnerable to threats 


* UEs in a private mobile network may have difficulty 
maintaining the most up-to-date patches, therefore making 
them vulnerable to threats 


(B) TREND 


Trend Micro” Mobile Network Security (TMMNS) 


TMMNS is a hybrid cybersecurity solution developed for enterprise customers to ensure the security of mobile user equipment 
(UE) and loT endpoint devices, as well as critical edge computing application servers that reside inside of the enterprise’s campus 
network. Based on the European Telecommunication Standards Institute (ETSI) Network Functions Virtualization (NFV) framework, 
TMMNS provides a fully virtualized solution that has the flexibility and agility to be deployed in the most popular commercial and 
open source virtualization platforms with high performance and low latency. Unlike most traditional cybersecurity solutions, 
TMMNS bridges the gap between information and communication technologies (IT/CT) to provide comprehensive protections, 
covering the network and endpoint layers to help customers face the new and diverse threats being seen throughout cyberattacks 
in 4G/LTE, NB-loT, and the 5G network. 


Joint-defense Between Network and Endpoint 


As acomprehensive solution, TMMNS offers two-layers of protection for your private mobile network: 


* TMMNS Network Protection Identifies and blocks vulnerability exploitation, malicious content, and suspicious network behaviors 
at the data network of a mobile network core, protecting your private mobile network at the network level 


* TMMNS Endpoint Protection Provides cellular UE visibility, identifies illegitimate cellular UE, and denies a cellular UE access to 
its radio access network, protecting your private mobile network at the endpoint level 


TMMNS Network Protection and TMMNS Endpoint Protection provide multi-layered protections by performing their functions in 
individually while simultaneously working together to provide a join defense against cyber threats. 


Benefits 


e Meet end-to-end security in mission-critical private mobile networks 
o Ensures that your mobile UE, loT endpoint devices, and application servers on your MEC system are well protected 
o Prevents misused or illegitimate UEs from attacking your IT or OT networks 
o Offers you an additional security protection layer across CT/endpoint and IT/network 


o Blocks risky cellular UE access to its radio access network, ensuring your private mobile data network is clean 


e Reduce security management workload of IT sec admin in enterprise ICT 


o Purpose-built for seamless CT and IT integration without third-party systems; security policy management is based on IMEI/IMSI 
rather than on IP address 


o Visibility of risk status for each cellular UE 


o Simple yet efficient security management in one console 


e Cost efficiency for deployment in mission-critical private mobile networks 
o No third-party systems needed for CT and IT integration, making deployment cost-efficient 


o Agentless and no firmware integration required for each cellular UE 


Trend Micro” Mobile Network Security (TMMNS) 





g Comprehensive hybrid cybersecurity solutions for enterprise private mobile networks 
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OT Zones IT Zones Internet 


Enterprise private mobile network zone 


©) Manage mobile network protection 
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Face Recognition Virtualized Network Augmented Reality Data Processing 
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Management detection and response for unprotected loT devices 


Trusted Device Management Comprehensive Network Protection 
via physical SIM card or Java applet via virtual software solution 
«y Unprotected loT security «x East-west network protection to secure 
edge computing application traffic 
v Trusted IoT link 
v North-south network protection to 
VY Device isolation secure UE and loT endpoint devices 
«x Data security 


Protection throughout various vertical markets 





g Our solutions help system integrators leverage shared band or unlicensed band radio 
to help build their customer's private mobile network. 
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Shopping Mall Smart Factory Port Airport Mining Enterprise 





Over 30 Years of Trusted Cybersecurity Leadership 
Global Threat Research 7 


To help you better understand and 
address the security challenges of 
today and tomorrow. 





450+ 10,000 100s of millions 
internal threat researchers registered white hat researchers of threats blocked daily 
and data scientists from 100 different countries 


Customers Agree 
FO RTUNE 10 of Top 10 Telecom 


With over 500,000 commercial GLOBAL coer a Petreraum 
i ; 9 of Top 10 Healthcare 

customers and offices in over 65 T O 

countries, Trend Micro protects 8 of Top 10 Automotive 

many of the largest organizations 

in the world. 


Contact us at 
https://www.trendmicro.com/5G-loT-contact 


(B) TREND 


Securing Your Connected World 








